Day: September 10, 2021

WordPress 5.8 beta Widget Editor cross site scripting

A vulnerability has been found in WordPress 5.8 beta (Content Management System) and classified as problematic. Affected by this vulnerability

Common Vulnerabilities and Exposures

SP Rental Manager Plugin up to 1.5.3 on WordPress ~/user/shortcodes.php orderby sql injection

A vulnerability was found in SP Rental Manager Plugin up to 1.5.3 on WordPress (WordPress Plugin) and classified as critical.

Common Vulnerabilities and Exposures

WP Academic People List Plugin up to 0.4.1 on WordPress Parameter ~/admin-panel.php category_name cross site scripting

A vulnerability was found in WP Academic People List Plugin up to 0.4.1 on WordPress (WordPress Plugin). It has been

Common Vulnerabilities and Exposures

Konnichiwa Membership Plugin up to 0.8.3 on WordPress Parameter subscriptions.html.php plan_id cross site scripting

A vulnerability was found in Konnichiwa Membership Plugin up to 0.8.3 on WordPress (WordPress Plugin). It has been declared as

Common Vulnerabilities and Exposures

3D Cover Carousel Plugin up to 1.0 on WordPress Parameter ~/cover-carousel.php id cross site scripting

A vulnerability was found in 3D Cover Carousel Plugin up to 1.0 on WordPress (WordPress Plugin). It has been rated

Common Vulnerabilities and Exposures

simpleSAMLphp Authentication Plugin up to 0.7.0 on WordPress simplesamlphp-authentication.php $_SERVER[“PHP_SELF”] cross site scripting

A vulnerability classified as problematic has been found in simpleSAMLphp Authentication Plugin up to 0.7.0 on WordPress (WordPress Plugin). Affected

Common Vulnerabilities and Exposures

Custom Menu Plugin Plugin up to 1.3.3 on WordPress Parameter ~/custom-menus.php selected_menu cross site scripting

A vulnerability classified as problematic was found in Custom Menu Plugin Plugin up to 1.3.3 on WordPress (WordPress Plugin). Affected

Common Vulnerabilities and Exposures

Twitter Friends Widget Plugin up to 3.1 on WordPress Parameter twitter-friends-widget.php pmc_TF_user/pmc_TF_password cross site scripting

A vulnerability, which was classified as problematic, has been found in Twitter Friends Widget Plugin up to 3.1 on WordPress

Common Vulnerabilities and Exposures

RentPress Plugin up to 6.6.4 on WordPress Parameter AjaxRequests.php selections cross site scripting

A vulnerability, which was classified as problematic, was found in RentPress Plugin up to 6.6.4 on WordPress (WordPress Plugin). This

Common Vulnerabilities and Exposures

WordPress User Activation Email Plugin up to 1.3.0 user-activation-email.php uae-key cross site scripting

A vulnerability has been found in WordPress User Activation Email Plugin up to 1.3.0 (Content Management System) and classified as

Common Vulnerabilities and Exposures

Dswjcms 1.6.4 PHP File resources unrestricted upload

A vulnerability was found in Dswjcms 1.6.4 and classified as critical. This issue affects an unknown part of the file

Common Vulnerabilities and Exposures

MipCMS 5.0.1 cross-site request forgery [CVE-2020-19263]

A vulnerability was found in MipCMS 5.0.1. It has been rated as problematic. Affected by this issue is some unknown

Common Vulnerabilities and Exposures

MipCMS 5.0.1 cross-site request forgery [CVE-2020-19264]

A vulnerability classified as problematic has been found in MipCMS 5.0.1. This affects an unknown function of the file index.php?s=/user/ApiAdminUser/itemAdd.

Common Vulnerabilities and Exposures

Dswjcms 1.6.4 links cross site scripting

A vulnerability classified as problematic was found in Dswjcms 1.6.4. This vulnerability affects an unknown functionality of the file index.php/Dswjcms/Basis/links.

Common Vulnerabilities and Exposures

Dswjcms 1.6.4 articleList cross site scripting

A vulnerability, which was classified as problematic, has been found in Dswjcms 1.6.4. This issue affects some unknown functionality of

Common Vulnerabilities and Exposures

Dswjcms 1.6.4 tfAdd cross-site request forgery

A vulnerability, which was classified as problematic, was found in Dswjcms 1.6.4. Affected is an unknown part of the file

Common Vulnerabilities and Exposures

BAB eibPort 3.9.1 /webif/SecurityModule excessive authentication

A vulnerability has been found in BAB eibPort 3.9.1 and classified as problematic. Affected by this vulnerability is an unknown

Common Vulnerabilities and Exposures

BAB eibPort 3.9.1 BMX Interface /tmp excessive authentication

A vulnerability was found in BAB eibPort 3.9.1 and classified as problematic. Affected by this issue is an unknown code

Common Vulnerabilities and Exposures

BAB eibPort 3.9.1 Configuration weak password

A vulnerability was found in BAB eibPort 3.9.1. It has been classified as problematic. This affects some unknown processing of

Common Vulnerabilities and Exposures

Pomerium up to 0.14.7/0.15.0 authorization [CVE-2021-39206]

A vulnerability was found in Pomerium up to 0.14.7/0.15.0. It has been declared as critical. This vulnerability affects an unknown